Microsoft brings phishing-resistant Windows sign-ins via Entra passkeys

Microsoft is rolling out passkey support for Microsoft Entra on Windows devices to provide phishing-resistant, passwordless authentication via Windows Hello. The feature is opt-in and will enter public preview worldwide from mid‑March through late April 2026 (with government cloud rollouts following), supports device‑bound FIDO2 passkeys for unmanaged devices, requires Entra admins to enable Passkeys (FIDO2) and create passkey profiles with Windows Hello AAGUIDs, and does not sync passkeys across devices nor replace Windows Hello for Business for managed devices.